[nastasha-solomon]

Summary

Fixes https://github.com/elastic/docs-content-internal/issues/1815.
Fixes https://github.com/elastic/docs-content-internal/issues/1813.
Fixes https://github.com/elastic/docs-content-internal/issues/2123.

Adds the Set up AlertZero and AlertZero privileges pages. Set up AlertZero replaces the Requirements page, which now redirects to it. It also adds the openai-daybreak and daybreak variables to docset.yml for the OpenAI Daybreak model names.

AlertZero
└── Set up AlertZero                    what you need, turn it on, choose models, start the Workers

Manage → Access control
├── Security Kibana privileges          adds an AlertZero row
└── AlertZero privileges                predefined roles, custom roles, and the Workers' own access

AI
└── Set up AI features                  links to AlertZero setup, models, and privileges

Previews

• Set up AlertZero - How to set up AlertZero in a space: the subscription, privileges, AI model, and data you need, extra requirements for specific Workers, how to turn AlertZero on, how to choose the models each Worker uses (including OpenAI Daybreak models), and how to start the Workers.
• AlertZero privileges - How to give people access to AlertZero, either with a predefined role on Stack or Serverless or with a custom role. It covers what analysts need to review and approve proposed actions, what administrators need to set up and manage Workers, and what access the Workers themselves run with.
• Set up AI features - Links to the AlertZero setup page for turning AlertZero on and choosing models, and to the AlertZero privileges page for access.
• Security Kibana privileges - Adds an AlertZero row that links to the AlertZero privileges page.

Generative AI disclosure

1. Did you use a generative AI (GenAI) tool to assist in creating this contribution?

• Yes
• No

Tool(s) and model(s) used: Claude Opus 5.5, via Claude Code and Cursor

[github-actions]

Elastic Docs AI PR menu

Check the box to run an AI review for this pull request.

• Review docs changes (docs-review). Status: not started.

Powered by GitHub Agentic Workflows and docs-actions. For more information, reach out to the docs team.

[github-actions]

🔍 Preview links for changed docs

• solutions/security/ai/set-up-ai-features.md
• solutions/security/alertzero/alertzero-privileges.md
• solutions/security/alertzero/requirements.md
• solutions/security/alertzero/set-up-alertzero.md
• solutions/security/manage/security-kibana-privileges.md

[github-actions]

Elastic Docs Style Checker (Vale)

Summary: 1 suggestion found

💡 Suggestions (1): Optional style improvements. Apply when helpful.

File	Line	Rule	Message
solutions/security/alertzero/alertzero-privileges.md	90	Elastic.WordChoice	Consider using 'cancel, stop' instead of 'Kill', unless the term is in the UI.

---

The Vale linter checks documentation changes against the Elastic Docs style guide. To use Vale locally or report issues, refer to Elastic style guide for Vale.

[natasha-moore-elastic]

Hey @nastasha-solomon, one question: should this PR also add the Proposed Actions and Agentic Investigations Kibana privileges (including Agentic Investigations subfeature privileges) to the Kibana privileges page? Or are these privs shared with Nightshift and will be documented as part of that work?

[natasha-moore-elastic]

LGTM, just a few minor suggestions, thanks!